某局点S6800设备丢弃过路转发NS的报文问题

/

/

设备:

6850 F6632

125F-AF R2820

故障详情：

现场 2级Mlag 互联，6850接服务器，当前在6850的入口抓包，可以看到服务器发来的流量，然后6850和125互联，但是再125侧抓不到 对应的包 当前看像是 6850 没有发出来.怀疑NS报文被6850丢弃了.

问题描述：S9850/S9820/S6860/S6850/S6825/S6805/S6800系列交换机在二层转发过路的NS报文时,可能被底层ACL命中限速丢弃问题

涉及版本型号：

R6710之前的版本(不含);其中S6800系列若未启用对应的vlan-if口,则不涉及.

问题根因：上述产品加载上述涉及版本时, 交换机在二层转发过路的NS报文时,如果报文速率持续达到600PPS及以上,系统会下发底层ACL将NS报文限速到300PPS,超过限速的NS报文会被ACL丢弃.

Acl-Type SYS FILTER, Stage VFP, Pipe 0, Global, Installed, Active

Prio Mjr/Sub 15/7, Group 5 [5], Slice/Idx 0/7, Entry 12, Single: 7

Rule Match --------

        Port Class: 0x1, 0x3 Port ClassID:0x0, 0x0 | stPbmp=0x000000000000000000000000000000048808787f87878f8c3e1e1e1fe1e02222, stPbmpMask=0x0000000000000000000000000000000000000000000000000000000000000000

        IPv6 Dest Addr: ff020000-00000000-00000001-ff000000, ffffffff-ffffffff-ffffffff-ff000000

        IP Type: IPv6 packet

Actions --------

        Remark class id 4027

然后后匹配ipv6_ping acl被限速丢包

========

Acl-Type RX IPv6 Middle Shadow, Stage IFP, Pipe 0, SinglePort, Installed, Active

Prio Mjr/Sub 526/12, Group 1 [1], Slice/Idx 9/110, Entry 3326, Triple: 7022/7790/8558

Rule Match --------

        Ports: 0x0000000000000000000000000000000000000000000000000000000000002000; 0x0000000000000000000000000000000000000000000000000000000000000000

        Lookup: VLAN ID valid[y], STP forwarding, 0x1c, 0x1c

        IP Type: IPv6 packet

        Class id: 4027 (VFP_ClassID)

Actions --------

        CAR cir 0x12c, cbs 0x800, pir 0x12c, pbs 0x800, pps 1, kbps 0, mode srTCM color blind

        Account mode  packets,  green and non-green

        Copy_to_cpu : Yes

        Change CPU pkt COS 3

        Permit

        Red Deny

        Red_Copy_to_cpu : No

        Yel Deny

        Yel_Copy_to_cpu : No

MatchedName:47, IPV6_PING

RateValue: 0

Accounting: Hi 1102021795, LO 222610537

PacketAccountingSave: Hi 1102021795, MI 0, LO 222610537

bytesAccountingSave: Hi 0, MI 0, LO 0

========   

解决方案:升级R6710版本后底层不再下发该类型ACl彻底解决.

升级R6710版本后底层不再下发该类型ACl彻底解决.